Behavioral task
behavioral1
Sample
cee13df677d9627c6ce52e462718fc34_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
cee13df677d9627c6ce52e462718fc34_JaffaCakes118
-
Size
256KB
-
MD5
cee13df677d9627c6ce52e462718fc34
-
SHA1
e2521a2db73866cbd6eb4ee5f1f25dd3bfe9049b
-
SHA256
9a08b5a0fa97fa3d3da16ed10d96bbc0829b6dd34fa55db8cf122343b554a997
-
SHA512
398dc2eb88dadf4973960f64f54bf0656cf6fec64f8c2cdb4fbb5b2d3bbf909eb34476591d76e54ab09db7d6a6883894264710848a99fbfb7ef6eb70ab470d4d
-
SSDEEP
3072:uoMCklDGW9pB/V0xWuEryQAcRjzgU+TBfdqOn0lWx3u:umW9R0AumKcR+TBVtx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cee13df677d9627c6ce52e462718fc34_JaffaCakes118
Files
-
cee13df677d9627c6ce52e462718fc34_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 160KB - Virtual size: 160KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE